Deeds of Access and Indemnity for UK Companies

If you have been asked to sign a deed of access & indemnity, the document can look more technical than it really is. Founders and directors often make the same mistakes: they assume it is just a formality, they sign without checking how it interacts with the company’s articles and D&O insurance, or they miss that the indemnity wording may be narrower than they expected. Another common problem is treating it as a standard board document, even though a poorly drafted deed can leave gaps around access to company papers, legal costs and what happens after a director leaves.

A deed of access & indemnity is usually about two practical protections. First, it gives a director or company officer access to company records they may need to defend a claim or answer a regulator. Second, it records the company’s promise to indemnify that person to the extent the law allows. This guide explains what the document does, where the legal limits sit for UK companies, the clauses to check before you sign, and the mistakes that regularly cause trouble later.

Overview

A deed of access & indemnity is a formal agreement between a company and a director, secretary or other officer. It usually covers access to company documents, payment or reimbursement of certain liabilities and costs, and the practical rules for making a claim under the deed.

Check who the deed protects, such as current directors, former directors, company secretaries or senior officers.
Check what records can be accessed, how quickly access must be given, and how long that right lasts after the person leaves.
Check the indemnity wording against the Companies Act 2006 limits, because some liabilities cannot legally be indemnified.
Check whether legal costs are covered up front, reimbursed later, or only paid once certain conditions are met.
Check how the deed works with the company’s articles, any service agreement, and D&O insurance.
Check for notice requirements, exclusions, repayment obligations and any conditions attached to making a claim.

What Deed of Access & Indemnity Means For UK Businesses

A deed of access & indemnity gives company officeholders a clearer contractual right to documents and financial protection than they might have if they relied only on informal assurances.

In practice, this document is most common where a private company wants to reassure directors that, if a dispute, investigation or claim appears later, they can get the papers and support needed to respond properly. It can also be relevant when investors appoint directors, when a founder steps onto the board for the first time, or when a company wants to tidy up governance before a funding round or sale.

Why companies use a deed instead of a simple clause

A deed is often used because it is more formal and can be drafted to survive after the officeholder stops acting for the company. That matters because many claims against directors do not appear until months or years later.

A short indemnity clause in an appointment letter may not deal properly with access to records, procedure, legal cost advances, document retention, confidentiality, or how the protections continue after resignation. This is where founders often get caught. They think the right exists automatically, but the practical detail is missing.

What “access” usually covers

The access part usually gives the individual a right to inspect and obtain copies of company books and records that relate to their period in office. The purpose is normally limited to defending or responding to actual or threatened proceedings, investigations, examinations, claims or official requests.

Depending on the drafting, the records may include:

board papers and board minutes
written resolutions
financial records relevant to the issue
emails and correspondence held by the company
contracts, reports and working papers connected to the matter
insurance documents, notices and policy schedules

The detail matters. A broad right is useful, but the company may want reasonable limits around confidentiality, legal privilege, data protection and the cost of retrieval. The officeholder will usually want enough certainty so they are not blocked by a gatekeeper when pressure is high.

What “indemnity” usually covers

The indemnity part usually says the company will indemnify the relevant person for liabilities, legal costs and other expenses incurred in connection with their role, but only to the extent UK law permits. That legal limit is not just drafting style. It is essential.

For UK companies, director indemnities are restricted by the Companies Act 2006. A company generally cannot indemnify a director against certain liabilities, especially liability to the company itself, or costs in criminal proceedings where the director is convicted, or certain regulatory penalties. There are, however, permitted categories, including certain third party liabilities and defence costs, subject to statutory conditions and repayment obligations in some situations.

That means a deed of access & indemnity is not a blank cheque. It is a defined framework, shaped by the law, for what support the company can properly give.

Who should consider one

These deeds are not only for large businesses. They can make sense for startups and SMEs where directors wear several hats and decision-making is fast.

You may want one if:

your company has a board with investor-appointed or non-executive directors
a founder is becoming a formal director for the first time
the business is entering regulated contracts or higher-risk trading arrangements
you are updating governance documents before fundraising or due diligence
a departing director needs certainty about future access to records

For the business, the benefit is not just protection for the individual. A well-drafted deed can reduce arguments, set procedure in advance and support better board recruitment. Good candidates often ask about indemnity and insurance before they accept an appointment, especially where the company is growing quickly or carrying operational risk.

Legal Issues To Check Before You Sign

The main legal issue is whether the deed matches what the company can lawfully offer, and whether the practical wording is strong enough to work when a problem actually arises.

Statutory limits under the Companies Act 2006

Before you sign, check that the indemnity respects the legal boundaries for directors. In broad terms, a UK company cannot exempt a director from liability for negligence, default, breach of duty or breach of trust owed to the company. It also cannot give an indemnity that cuts across the statutory restrictions.

There are exceptions for qualifying third party indemnity provisions and certain defence costs. Even then, the drafting should make clear where repayment is required, for example if the director is convicted in criminal proceedings or judgment goes against them in a way the statute does not permit the company to cover.

If the wording tries to cover everything without qualification, that is a red flag. A clause that goes beyond what the law allows may be unenforceable in whole or in part.

Consistency with the articles of association

The deed should sit properly alongside the company’s articles of association. Many companies already include some indemnity or insurance provisions in their articles, but those clauses are often general and may not deal with record access or procedure.

Check:

whether the articles already contain an indemnity and, if so, whether the wording conflicts with the deed
whether board or shareholder approval is needed for the deed
whether the articles say anything about document retention or inspection rights
whether there are restrictions on delegations, authorisations or related approvals relevant to the deed

If the articles and the deed pull in different directions, the company can end up arguing over process at the worst possible time.

D&O insurance interaction

A deed of access & indemnity should be read together with directors’ and officers’ insurance, not as a substitute for it.

D&O insurance may respond to risks the company cannot lawfully indemnify, subject to the policy terms. The deed may also require the company to maintain cover, notify the insurer, or help the director make a claim. Before you accept the provider’s standard terms, check who controls notifications, whether defence costs are advanced, and whether the deed says anything that could cut across policy conditions.

Founders often assume that if the company has D&O cover, the deed is less important. In reality, the two protections do different jobs. Insurance depends on policy wording, exclusions and claims handling. The deed sets the company’s direct obligations to the officeholder.

Scope of the access right

Access wording should be specific enough to be usable. A promise to provide documents “as appropriate” is vague. The deed should deal with timing, format and purpose.

Useful drafting often covers:

what documents are included
whether the right includes copies as well as inspection
how quickly access must be provided
who pays retrieval and copying costs
how privilege, confidentiality and personal data will be handled
how long the right continues after the person ceases to hold office

This point matters most when management changes. A former director may need papers held by a new board that is less cooperative than the old one.

Defence costs and advancement

One of the most practical clauses is the legal costs clause. Waiting until the end of proceedings for reimbursement can be difficult for an individual facing urgent legal bills.

Some deeds allow advancement of defence costs as they are incurred, subject to repayment if the outcome falls outside what the law permits the company to indemnify. Others provide reimbursement only after the costs are proven and approved. The commercial effect is very different, so this should be clear before you sign.

Notice, cooperation and control of defence

The company will usually want prompt notice of any claim and a right to be kept informed. The officeholder will want to preserve independence, especially where interests may diverge.

Look closely at clauses dealing with:

how soon notice must be given
what information must be provided
whether the company can appoint solicitors
whether the company can control settlement discussions
whether consent is needed before costs are incurred

Clauses that are too strict can create technical breaches. Clauses that are too loose can create duplicated cost or strategic conflict.

Confidentiality, data protection and privilege

Access rights do not override every other legal obligation. Company records may include legally privileged advice, personal data and confidential third party information.

The deed should recognise that disclosure may need to be managed carefully. For example, some materials may need redaction, some may be shared only through legal advisers, and some may be withheld if privilege belongs to the company and has not been waived. The point is not to frustrate access, but to create a process that is lawful and workable.

Common Mistakes With Deed of Access & Indemnity

The most common mistake is assuming all deeds of access & indemnity are standard, when small wording differences can change the value of the protection significantly.

Treating the deed as a template exercise

Many SMEs reuse a document from another company without checking whether it matches their board structure, article provisions, insurance arrangements or record-keeping systems. A deed that worked for a venture-backed company may not fit a founder-led business with informal governance.

If your company stores key records across personal email accounts, messaging apps and different cloud platforms, an access clause that only refers to “company books” may not achieve much in practice.

Ignoring post-resignation issues

Claims often surface after a director leaves. A deed that is silent on survival periods, continuing access, and support for former directors can be too thin to help when it matters.

Before you sign, check whether the protections continue indefinitely for matters connected to the person’s period in office, or whether they expire after a fixed period. If there is a cut-off, consider whether it is realistic for your industry and risk profile.

Missing the exclusions and repayment triggers

Some business owners focus only on the opening indemnity promise and skip the exclusions. That is risky.

Common carve-outs may relate to:

fraud, dishonesty or wilful default
criminal fines or penalties
liability to the company itself
amounts already paid by insurers
claims arising from actions outside the person’s proper authority

There may also be repayment obligations if defence costs were advanced and the final outcome means the company cannot lawfully bear them. Those mechanics should be easy to follow.

Forgetting board approvals and company records

A deed can be substantively well drafted and still be mishandled. If the company does not approve it properly, execute it correctly as a deed, or store it with the corporate records, avoidable disputes can follow.

Private companies should make sure the right board process is followed and that the deed is signed and witnessed correctly where required. Internal governance discipline matters here.

Overlooking practical document access problems

The deed may promise access, but the company may not have a reliable record retention system. This is where founders often get caught before they rely on a verbal promise that “everything is on file”.

If records are incomplete, scattered, or deleted under a routine policy, the right of access may be much less useful than it appears on paper. Businesses should align the deed with actual record retention and IT practices.

Relying on verbal comfort from investors or co-founders

A future board may not share today’s understanding. If an investor, founder group or parent company says access and indemnity will not be a problem, that reassurance should be reflected clearly in the signed deed and supporting governance documents.

When tension appears, people go back to the signed wording, not the meeting room conversation.

FAQs

Is a deed of access & indemnity mandatory for UK companies?

No. UK companies are not generally required to put one in place, but many choose to do so for directors and other officeholders because it gives clearer contractual protection than informal arrangements.

Can a UK company indemnify a director for everything?

No. The Companies Act 2006 restricts what a company can indemnify. Certain liabilities, especially some liabilities owed to the company and some criminal or regulatory outcomes, cannot be covered in the same way as third party defence costs.

Does a former director still get access to records?

Only if the deed, articles or another enforceable arrangement gives that right, or if another legal basis applies. A well-drafted deed usually states that access continues after the person leaves for matters connected to their time in office.

Is D&O insurance enough on its own?

Usually not. Insurance and a deed of access & indemnity do different things. Insurance depends on policy terms and exclusions, while the deed sets out the company’s own obligations around access, indemnity and procedure.

Who should review the deed before it is signed?

The company should have it reviewed from both a governance and practical risk perspective, especially against the articles, board approvals, insurance arrangements and record access systems. The individual asked to sign may also want separate advice if the wording is heavily qualified or negotiated.

Key Takeaways

A deed of access & indemnity is a formal agreement that usually gives directors and officers rights to company records and certain indemnity protection.
For UK companies, the indemnity must stay within the limits set by the Companies Act 2006, so broad promises should be checked carefully.
The best drafting covers practical issues, including access timing, copies of records, defence costs, notice obligations, confidentiality and how long the rights continue after a person leaves.
The deed should be consistent with the company’s articles, board approvals and D&O insurance, rather than treated as a standalone template.
Common problems include vague access wording, missing post-resignation protection, overlooked exclusions, and poor company record-keeping.
Before you sign, make sure the document works in the real situations where disputes arise, not just in theory.

If you want help with board approvals, indemnity wording, D&O insurance alignment, access to company records, you can reach us on 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.

Official Sources to Check

Rules and regulator guidance can change. Check the current official material most relevant to this issue before relying on the article: